Legitimate emails from the University of Surrey will come from addresses ending in @surrey.ac.uk. However, cyber criminals can sometimes send emails that appear to come from an @surrey.ac.uk address if an internal account has been compromised.
Regardless of who an email appears to be from, it should be treated as suspicious if it:
Requests an urgent or unexpected payment
Asks for a password, banking details, or personal information
Contains links to websites that do not end in surrey.ac.uk
Creates a sense of urgency or threatens consequences for not acting immediately
If in doubt, contact the relevant University department directly using contact details from the official University website (surrey.ac.uk) — not by replying to the email or using any contact details it contains.
If in doubt, contact the relevant University department directly using contact details from the official University website (surrey.ac.uk) KA-03121 5 IT Phishing Published